Zimbra Forums

I've been revisiting the idea of adding dynamic protections for Zimbra servers, especially as recent discussions have highlighted related challenges. For instance, there's an ongoing request for a Web Application Firewall (WAF) enhancement, which you can vote on here: https://pm.zimbra.com/p/web-app...

I think you mean that anyone can reproduce the same steps as the builder to build their own version. Reproducible builds actually mean to build the same source code twice and getting the same equal binaries as an output twice. Agreed. A better term might be "repeatable." In this context, ...

I don't think the above code works (nginx doesn't like &&). I've been playing around with using this on my test site, and so far, it seems to be working: -Aaron Nice! ....Thanks for sharing your solution. The only other way I can think of given nginx's limited if directive or your working s...

Did a FOSS build and then update yesterday on a test server. This might be of interest to FOSS users. It's from my tripwire morning report of what happened during the update that FOSS users go through to patch from version 10.0.9 to 10.0.10 given this method requires running install.sh to perform th...

A few things and a little background. swatchdog has to restart after log rotation which is handled by a specific entry for /var/log/zimbra.log in /etc/logrotate.d/zimbra. logrotate is kicked off by cron which you can see in /etc/cron.daily Because they didn't specify a retry time, they are using a s...

I would love to know what script is sending these messages. Is it something in cron? Any clues? % cat /opt/zimbra/conf/swatchrc A perl program called swatchdog uses this config file and is fed by watching /var/log/zimbra.log ... Think of swatchdog like a tail -f but with some extra syntax to make d...

- Self-build. I run Ubuntu 22.04 LTS across most of my servers so was forced to build some 'legacy' 20.04 VMs to run Zimbra as it took them so long to support 22.04 (in fact after 24.04 LTS was released!). So I don't have build/development resources to hand to build Zimbra. I guess now 22.04 builds...

I used to feel exactly like what you have articulated about the build process when 9.0 FOSS binaries were no longer provided. It appeared complicated and coupled with bad documentation that made building a source release feel more like trial and error than reproducible at times. That changed when Ad...

https://<zimbra-hostname>/service/extension/graphql If the patch is successfully applied, you should receive the following error message: HTTP ERROR 500 javax.servlet.ServletException: HTTP GET requests are disabled on GraphQL endpoint. To re-enable, contact Zimbra Support. Can we do something like...

HI Adrian, I did end up redoing the tag building using the remote method vs local cloning with git tags. About 11-13 seconds vs 1:18-1:20 which is fast enough that I am now doing it dynamically inside build_zimbra.sh instead of calling an external tag helper and using cached files containing prebui...